Secure by Design QASECDEV-QA

QASECDEV-QA
Cena na vyžiadanie

This course teaches how to design, build, test, and operate secure software in modern development environments. It replaces bolt-on security approaches with secure-by-design practices embedded across the full system lifecycle, from architecture and development through deployment and operations. Learners explore how security integrates with DevOps and CI/CD pipelines, then apply secure design and threat modelling techniques to identify and manage risk early. The course develops practical understanding of security testing, vulnerability management, identity and access control, data security, and cryptography, forming a strong foundation for secure application development.Real-world weaknesses are examined using the latest OWASP Top 10, showing how vulnerabilities emerge and how they can be prevented through better design, coding, and configuration. Software supply chain risks, including third-party components and cloud-native dependencies, are also covered. The course extends into AI security, introducing the AI lifecycle, AI-specific threats, and the ETSI EN 304 233 global standard for securing large language models, agentic systems, data, and prompts. By the end of the course, learners can apply secure engineering practices to build resilient, trustworthy software and AI-enabled systems.

Integrate security throughout the entire system lifecycle rather than treating it as a final testing step
Apply secure-by-design principles when planning, architecting, and building software systems
Identify, assess, and prioritise cyber threats using structured threat modelling and risk assessment methods
Embed automated security testing and vulnerability management into modern DevOps and CI/CD practices
Design and implement strong identity, access control, and Zero Trust principles in applications and APIs
Protect sensitive information using data security controls and applied cryptography
Recognise and mitigate critical application security risks, including those in the OWASP Top 10
Understand and manage software supply chain risks, including third-party dependencies
Apply security principles to cloud-native and distributed architectures
Explain how AI systems introduce new attack surfaces and risk categories
Identify and mitigate vulnerabilities in LLMs, agentic systems, and AI-generated code
Use emerging frameworks and standards to secure AI models, data, prompts, and infrastructure
Adapt traditional security practices for AI-driven and autonomous systems
Contribute to a culture of continuous security monitoring and improvement

Secure by Design

Mám záujem o vybraný QA kurz

GOPAS Bratislava

GOPAS Brno

GOPAS Praha

Obchodné údaje